Macao — Cyber Threat Profile
Macao anchors its cyber regime in the Cybersecurity Law (Law No. 13/2019), in force since December 2019, requiring critical-infrastructure operators to report incidents to CARIC, the Judiciary Police's alert-and-response centre; MOCERT, an APCERT-member CERT, handles community incident response. Exposure centers on the casino economy, the territory's dominant industry, which draws financially motivated and espionage-linked interest, including a 2021-22 spear-phishing campaign against 17 Macao hotels attributed with moderate confidence to DarkHotel. In H1 2026, CARIC issued 117 alerts to infrastructure operators, up from H1 2025, while monitoring seven incidents, as the Cyber Security Center rolled out new vulnerability-management specifications.- Secure Internet servers per 1M people (2024): 6,586.6 (source: World Bank)
- Internet users (2024): 89.8% of population (source: World Bank)
Threat actors targeting Macao
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions